Nihilo Invoice (“Nihilo”, “Service”, “we”, “us”) is operated by Manifesto.al (“Manifesto”), with registered address at Rruga Mbreti Gent, Shkodër, Albania, 4001. Contact: info@nihilo.pro.
This Privacy Policy explains how we collect, use, share, store, and protect personal data when you use nihilo.pro, our applications, free tools, and related services. It is designed to meet the requirements of Law No. 124/2024 “On Personal Data Protection” of the Republic of Albania (aligned with the EU GDPR) and other applicable law.
If you do not agree with this Policy, please do not use the Service.
1. Roles: controller and processor
Account & website data. For data about how you register, sign in, browse our marketing site, contact support, or use free public tools, Manifesto is the controller.
Customer business data. When you (a “Customer”) store invoices, clients, quotes, payments, documents, and similar content in Nihilo (“Customer Data”), you are the controller of that data. We act as your processor and process Customer Data only to provide the Service according to your instructions and this Policy.
Your clients and contacts (“End Customers”) who open invoices or the client portal interact with data you control. Their relationship for that content is primarily with you; we process it on your behalf.
2. What we collect
2.1 Information you provide
- Account identity: name, email address, password (hashed), company name, and profile details.
- Business settings: addresses, tax IDs, logos, templates, and preferences you configure.
- Customer Data: clients, contacts, invoices, quotes, credits, expenses, projects, notes, files, and related records you upload or create.
- Support communications: emails and messages you send to us.
- Free tools: data you enter in public tools (for example the free invoice generator). Drafts may stay in your browser only; downloaded PDFs may be logged for abuse prevention and product analytics as described below.
2.2 Information collected automatically
- IP address, browser type, device type, operating system, approximate location derived from IP, and usage logs.
- Cookies and similar technologies needed for login sessions, security, and basic site function. See Section 3.
2.3 Payments
If you enable online payments for your clients, card and bank details are collected and processed by payment gateways (such as Stripe or other providers you connect). We do not store full payment card numbers (PAN). We may receive limited transaction metadata (status, last four digits, amount, currency) needed to reconcile payments in your account.
2.4 Information from third parties
We may receive information from service providers (hosting, email delivery, fraud prevention) and, if you connect integrations, from those third-party services according to your settings.
3. Cookies and similar technologies
We use cookies and similar technologies to keep you signed in, protect accounts, remember preferences, and understand how the marketing site and Service are used. Essential cookies are required for the Service to function. You can control non-essential cookies through your browser settings; blocking essential cookies may prevent login or core features from working.
4. Legal bases (Law 124/2024)
We process personal data only when we have a lawful basis, including:
- Contract: to create and administer your account and provide the Service you requested.
- Legitimate interests: to secure the Service, prevent abuse, improve features, and communicate service-related notices, balanced against your rights.
- Consent: where required (for example certain marketing emails or optional cookies), which you may withdraw at any time.
- Legal obligation: to comply with Albanian or other applicable law, court orders, or regulatory requests.
5. How we use information
- Provide, maintain, and improve Nihilo Invoice and free tools.
- Authenticate users, prevent fraud, and keep the Service secure.
- Send transactional emails (invoices on your behalf, password resets, security alerts).
- Respond to support requests and investigate issues.
- Comply with law and enforce our Terms.
- With your consent or as otherwise permitted, send product updates or marketing (you can opt out).
6. How we share information
We do not sell personal data. We may share data with:
- Service providers (processors) who host infrastructure, send email, process payments, provide analytics, or support operations — under contracts that require appropriate protection. A current list is available on request at info@nihilo.pro.
- Your authorized integrations when you connect third-party apps.
- End Customers and your team as needed to display documents and the client portal according to your settings.
- Professional advisors (legal, accounting) under confidentiality where needed.
- Authorities when required by Albanian law or valid legal process (see our Third-Party Requests page).
- Business transfers in connection with a merger, acquisition, or asset sale, subject to appropriate safeguards.
We may share aggregated or anonymized information that does not identify you.
7. International transfers
Our Service and providers may process data on servers outside Albania or the European Economic Area. Where we transfer personal data internationally, we use appropriate safeguards required by Law No. 124/2024 (such as standard contractual clauses or equivalent measures) where applicable.
8. Retention
We retain account and Customer Data for as long as your account is active and as needed to provide the Service. After deletion or closure, we may retain limited data for backups, dispute resolution, security, and legal retention periods, then delete or anonymize it. Free-tool drafts that stay in your browser are under your control; server-side logs of downloads (if any) are kept only as reasonably needed for security and operations.
9. Security
We implement appropriate technical and organisational measures to protect personal data against unauthorised access, loss, or alteration (including access controls, encryption in transit where applicable, and hardened hosting). No method of transmission or storage is completely secure; we work to reduce risk continuously.
Where a personal data breach is likely to result in a risk to individuals’ rights and freedoms, we will notify the Albanian Information and Data Protection Commissioner as required (generally within 72 hours of becoming aware) and inform affected users when the law requires.
10. Your rights
Under Law No. 124/2024, you may have the right to:
- Access your personal data
- Rectify inaccurate data
- Erase data (“right to be forgotten”) in certain cases
- Restrict or object to certain processing
- Data portability
- Withdraw consent where processing is based on consent
- Lodge a complaint with the supervisory authority
To exercise these rights for data we control, email info@nihilo.pro. We may need to verify your identity. For Customer Data about your End Customers, please contact the Customer who controls that account; we will assist that Customer as their processor where appropriate.
Supervisory authority: Information and Data Protection Commissioner (Komisioneri për të Drejtën e Informimit dhe Mbrojtjen e të Dhënave Personale), Republic of Albania — idp.al.
11. Children’s privacy
The Service is intended for businesses and adults. It is not directed to children under 16. We do not knowingly collect personal data from children under 16. If you believe we have done so, contact us and we will delete the data where required.
12. Links to other sites
The Service may link to third-party websites or services. Their privacy practices are their own; this Policy does not cover them.
13. Changes
We may update this Privacy Policy from time to time. The “Last updated” date will change when we do. Material changes may be communicated by email or a notice in the Service. Continued use after the effective date constitutes acceptance of the updated Policy where permitted by law.
14. Contact
Manifesto.al · Nihilo Invoice
Rruga Mbreti Gent, Shkodër, Albania, 4001
Email: info@nihilo.pro
This page is an operational privacy notice for Nihilo Invoice. It is not legal advice. For formal compliance review, consult qualified counsel in Albania.